Andreas Niemann
db47037bdc
CONTRACT_004 offsite target (ADR-004 'second self-hosted location'). @pulumi/minio program (modeled on olsicloud4 modules/minio): bucket 'olsitec-foundation' + scoped IAM user/policy + service account on minio.wob.olsitec.de:19000. Verified: scoped SA can put/list/delete in its bucket, DENIED cross-bucket. Admin creds + scoped creds via ENV/state only (gitignored), never committed. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
13 lines
293 B
Text
13 lines
293 B
Text
# dependencies
|
|
node_modules/
|
|
# pulumi local state backend (bootstrap) — backed up to RustFS/offsite, not git
|
|
bootstrap/state/
|
|
# local-only overrides
|
|
*.local
|
|
*.local.*
|
|
# os
|
|
.DS_Store
|
|
provision/state/
|
|
offsite-backup/state/
|
|
offsite-backup/Pulumi.prod.yaml
|
|
provision/Pulumi.foundation-test.yaml
|